11 October 2025

Predictable Fail

The UK has a law, the Online Safety Act of 2023, which requires all online services to age verify all of their users. 

This has created a market niche for firms which collect user data, images of their identification, and other personally identifiable information (PII) to do this.

Well, one of these verifiers has leaked over 70,000 Discord users PII.

I when this legislation was first mooted, this one of the problems that opponents cited:

Communication platform provider Discord has admitted that around 70,000 users had their government IDs stolen as part of its recent data breach.

The breach, which Discord insists occurred at an unidentified third-party customer service provider, involved government ID scans that users upload to verify their age.

Some countries have introduced legislation requiring platforms to vet users and ensure only those that meet a certain age threshold are allowed access. The most recent example is the UK with its Online Safety Act.

The UK says in-scope platforms, like Discord, must implement mechanisms to verify their users' ages "without collecting or storing personal data, unless absolutely necessary." 

Discord's help article on how users can verify their age details two methods.

The first sees users take a photo of themselves holding a photo ID and a piece of paper with their username on it. This process is completed through Discord itself.

This was foreseeable, and foreseen.

The Tory passed law could be changed to make it less risky and draconian, but draconian infringements on personal rights are kind of a brand for Keir Starmer,  so I would expect any adjustments to make it worse.

0 comments :

Post a Comment